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16  Problem  projects  -  the  ones  that  get  killed  or 
are  launched  but  disappoint  -  can  leave  techies  with 
unresolved  feelings  that  linger  for  years.  Here  are 
some  suggestions  for  avoiding  major  pain. 

20  Visualization  tools  let  business  users  see 
simulated  screens  before  coding  begins  and 
help  ensure  that  application  developers  don't 
miss  key  user  requirements. 
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CIOs  Reveal  Their  Picks  for  Beach  Reads 


AS  INFORMATION  TECHNOLOGY 

managers  venture  out  on  vaca¬ 
tion,  they’re  trading  server  logs 
for  reading  material  of  a  different 
ilk.  Computerworid  polled  several  IT  execs 
about  their  summer  reading  plans. 

Beach  dark,  vice  president  of  IT,  Georgia 
Aquarium:  “1  think  I've  narrowed  it  down  to 
The  Last  Lecture,  by  Randy  Pausch.  The  other 
candidates  were  liar's  Pbker,  by  Michael 
Lewis,  and  Made  to  Stick;  Why  Some  Ideas 
Survive  and  Others  Die,  by  Chip  Heath  and  Dan 
Heath.  I  picked  the  Randy  Pausch  because 
he  was  a  computer  science  guy.  He  was  diag¬ 
nosed  with  terminal  pancreatic  cancer,  so  the 
book’s  about  living  your  life  to  the  fullest." 

Larry  Bonfante,  CIO,  United  States  Tennis 
Association:  “I’ll  take  Outsmart.'  How  to  Do 
What  Your  Competitors  Can't,  by  Jim  Champy, 


because  I’m  a  big  fan  of  Champy’s  work; 
Deception  Point,  by  Dan  Brown,  who  always 
writes  page-turners;  and  Bad  Moon  Rising, 
by  Hank  Bordowitz  —  I  am  a  classic-rock 
aficionado  and  play  in  a  rock  band,  so  I’m 
interested  in  the  real  story  of  what  happened 
with  Creedence  Clearwater  Revival  and 
John  Fogerty." 

Anthony  MurabHo,  CIO,  Cubist  Phar¬ 
maceuticals  Inc.:  “The  Shallows:  What  the 
Internet  Is  Doing  to  Our  Brains,  by 
Nicholas  Carr.  While  I  think  his  I 
tone  is  somewhat  north  of  bom-  tv.  .'..lij 


Micro 

Burst 


721% 

•ncrease  m  HTML  5 
freelance  jobs  posted 
online  in  the  past  quarter. 


WIRELESS  TECH 

Bluetooth  4.0 
To  Give  Gadgets 
Bursty  Links 


laptops  later  this  year,  the  Bluetooth 

Special  Interest  Group  reported 
earlier  this  month. 

FUTURE  WATCH 

MIT  Design  Could  Speed  Up  the  Internet 

The  new  standard  adds  a  low- 
power  option  for  transmitting  small 
bursts  of  data  over  short  ranges. 

The  technology  could  first  make 

H  ■■  IT  RESEARCHERS  have  developed 
IS  MU  technology  that  they  say  not  only 
IVII  will  make  the  Internet  too  to 

U  W  ■  1,000  times  (aster,  but  also  could 
make  high-speed  data  access  a  lot  cheaper. 

three  to  five  years,  Chan  said. 

Today’s  routers  have  trouble  dealing  with 
incoming  fiber-optic  signals,  so  those  signals 
are  converted  into  electrical  signals  that  can 
be  stored  in  memory  until  they  can  be  proc 

pedometers  and  other  gadgets 
that  run  on  coin-cell  batteries,  said 

Mike  Foley,  executive  director  of  the 

Bluetooth  SIG.  the  standards-setting 
organization. 

gains  lies  within  the  routers  that  direct 
traffic  on  the  Internet,  according  to  Vincent 
Chan,  an  electrical  engineering  and  com¬ 
puter  science  professor  at  MIT,  who  led  the 
research  team.  Chan  told  Computerworld  that 
replacing  electrical  signals  inside  the  routers 
with  faster  optical  signals  would  make  the 
Internet  100  times  —  if  not  1,000  times  — 
faster,  while  also  reducing  the  amount  of 

cal  signals  are  subsequently  converted  back  to 
optical  signals  so  they  can  be  sent  back  out. 

That  process  eats  up  time  and  energy,  so 

Chan  and  his  team  developed  technology  they 
call  flow  switching  that  would  eliminate  the 
need  for  such  conversions. 

A  speedier  Internet  would  be  a  huge  ac¬ 
complishment,  said  Rob  Enderle,  principal 
analyst  at  Enderle  Group.  “Right  now,  the 

phones  could  include  Bluetooth  4.0 
and  be  able  to  collect  data  from 
other  devices,  for  applications  such 
as  monitoring  energy  usage  and 
health.  Foley  said. 

The  industry  continues  to  add 
wireless  capabilities  to  gadgets  like 
cameras  to  help  them  communicate 
with  other  devices.  Technologies 

What  would  the  Internet  be  like  if  it  ran 
that  much  faster?  Today,  a  user  who  has  a  hard 
time  downloading  a  100MB  file  would  be  able 
to  easily  send  a  10GB  file,  according  to  Chan. 

With  increasingly  powerful  computer  proc¬ 
essors  and  bandwidth-hungry  applications. 

ing.  This  change  could  transform  the  industry 
as  we  know  it,”  he  said.  “We  are  going  to  need 
a  faster  Internet.  We  need  it  now.” 

However,  analysts  noted  that  it  would  be 
expensive  to  replace  current  routers  with  the 
new  technology. 

like  Wi-Fi  maintain  continuous  con¬ 
nections.  which  can  drain  battery 
life,  but  Bluetooth  4.0  could  let 
devices  exchange  low-level  infor¬ 
mation  over  short  distances  without 
using  much  energy.  Foley  said. 

Feds  Lower  Bar 
For  EHR  Funds 

Feedback  prompts  HHS  to  cut  quality 
metrics  in  half  and  extend  deadlines 
for  fully  implementing  each  phase 
of  the  new  rules.  By  Lucas  Mearian 


AS  PART  OF  ITS  EFFORT  to  encourage  widespread 

adoption  of  electronic  health  records  (EHR)  systems 

that  health  care  providers  must  meet  if  they  want  to 

of  electronic  records  are  spelled  out  in  the  final  Phase  1  EHR 
implementation  guidelines  that  the  U.S.  Department  of  Health 
and  Human  Services  issued  earlier  this  month.  The  864-page 
document  was  finalized  after  a  three-month  public  comment 
period  on  draft  rules  that  HHS  released  last  December. 


$36  billion  in  federal  funds  avail¬ 
able  for  EHR  projects  —  had  served  as  a  prod  for  Kern  Medical 
Center,  a  222-bed  teaching  hospital  in  Bakersfield,  Calif.,  to  take 
early  steps  to  make  sure  it  could  meet  the  final  guidelines. 

In  a  contract  with  Medsphere  Systems  Cotpi  to  deploy  its  Open- 
Visa  EHR  system  later  this  year,  the  health  care  firm  required 
the  vendor  to  "deliver  meaningful  use,  however  the  requirements 
turn  out,”  said  Bill  Fawns,  director  of  IT  services  at  Kern.  “Our  ap¬ 
proach  to  meaningful  use  has  been  to  throw  it  back  to  our  vendor.” 

A  key  change  in  the  guidelines,  according  to  experts,  allows 
providers  to  begin  EHR  deployments  in  2012, 2013  or  2014, 
and  then  take  up  to  two  full  years  to  fully  implement  Phase  1 
standards.  The  initial  proposal  would  have  required  all  entities 
to  meet  final  Phase  3  guidelines  by  2015. 

Today,  only  20%  of  physicians  and  10%  of  hospitals  use  even 
the  most  basic  EHR  technology,  acknowledged  HHS  Secre¬ 
tary  Kathleen  Sebelius  during  a  news  conference  announcing 
the  guidelines.  The  HHS  Centers  for  Medicare  and  Medicaid 
Services,  which  created  the  meaningful-use  rules,  estimates  that 
66.4%  to  92.6%  of  hospitals  and  between  21%  and  53%  of  private 
physician  practices  will  have  implemented  EHRs  by  2015. 

The  latest  rules  do  little  to  promote  the  electronic  exchange  of 
EHRs  between  hospitals.  “There  wasn't  much  to  promote  health 
information  exchange  in  the  proposed  rule,  but  they  scaled  it 
back  even  further  in  the  final  rule,”  Connelly  said. 

He  expects  health  information  exchanges  to  be  addressed 
further  in  Phases  2  and  3.  • 


Telecom  Giant 
Takes  to  Web  2.0 

A  gradual  rollout  of  microblogging  and 
social  networking  tools  is  improving 
communication  and  collaboration  at 
Alcatel-Lucent.  By  Sharon  Gaudin 


tool  based  on  the  free  Yammer  platform  in  September  2008. 
Employees  may  not  have  fully  understood  the  corporate  benefits 
of  microblogging,  but  they  were  intrigued. 

The  move  wasn't  endorsed  or  promoted  by  management,  and 
no  one  was  told  to  use  the  system.  But  the  number  of  Yammer 
users  inside  the  company  slowly  started  to  grow  —  from  about 
250  people  at  the  end  of  2008  to  9,300  today. 

“It  was  a  groundswell  activity  —  and  it  didn’t  cost  us  any¬ 
thing,”  Lowe  said. 

In  Match  2009,  Lowe  launched  an  effort  to  improve  collabora¬ 
tion  among  workers  housed  in  offices  around  the  world.  For  13 
months,  he  gathered  requirements,  analyzed  available  technolo¬ 
gies,  garnered  the  support  of  IT  executives  and  secured  funding. 


U  was  dll  exciung,  entrepreneurial  way  ot  getting  things  done, 

Lowe  said. 

|  XCCUTIVES  at  telecommunications  giant  Alcatel-Lucent 

1  -  knew  that  the  company  needed  to  find  a  better  means  of 
internal  communication  following  its  formation  via  the 

1  -  2006  merger  of  Alcatel  SA  and  Lucent  Technologies  Inc. 

“There  was  a  problem  in  that  we  had  no  way  to 
communicate  across  boundaries,"  said  Greg  Lowe,  social  media 
strategist  and  global  infrastructure  architect  at  Alcatel-Lucent. 

“Our  CEO  had  a  key  message  that  we  needed  to  be  much  more 
collaborative,  yet  we  didn’t  have  the  tools.  We  were  stuck  with 

Tbe  result  of  that  effort:  In  April,  Alcatel-Lucent  started  rolling 
out  a  Web  2.0  service  from  Jive  Software  Inc.  that  provides 

Facebook-Iike  social  networking  tools,  such  as  updates,  people 
searches  and  communication  channels,  to  the  corporate  world. 

The  service  also  lets  employees  communicate  with  customers, 
partners  and  suppliers. 

Lowe  moved  slowly  again  in  implementing  Jive,  first  invit¬ 
ing  just  125  people  to  join.  Usage  spread  quickly,  though:  the 
company  now  has  about  20,000  Jive  users,  Lowe  said. 

There  was  a  problem  in  that  we  had  no  way  to  communicate  across  boundaries. 


Jason  Scott 

This  guardian  of 
digital  history  is 
archiving  whatever  he 
can  get  his  hands  on. 


Agile  abilities  for  ALM 

For  more  than  a  decade,  CollabNet  has  brought  innovation  to 
software  development.  Our  ideas,  thoughts,  and  work  that 
started  with  the  Subversion  community  have  grown  into  a 
suite  of  products  that  bring  our  clients  flexibility, 
traceability  and  the  ability  to  iterate  with  Agile  ALM. 


See  how  TeamForge  and  ScrumWorks  Pro  can  improve 
your  team’s  Agile  ALM  abilities 


www.collab.net/abilities 


THE  GRILL  |  JASON  SCOTT 


U  People  think  Facebook  is 
an  unstoppable  juggernaut 
and  we  have  to  fight.  But 
something  better  will  come. 


Continued  from  page  6 


history?  The  idea  of  exploring  a  world,  trying  to  figure  out 
the  meaning  of  that  world,  pull  out  answers  from  it  and 
solve  a  quest  was  readily  taken  over  by  graphic  adventures. 
These  companies  didn't  ask  how  they  could  improve  text 
adventures,  so  they  lost  money  and  got  bought  out. 


Where  can  are  find  influences  of  text  adventures 
today?  Everything  in  which  you  are  presented  with 
a  quest  and  must  figure  out  —  through  skill,  wit  or 
luck  —  what  you  are  there  for,  what  you  need  to  do  and 
how  to  do  it  is  a  descendant  of  text  adventures.  A  lot  of 
what  we  consider  “sandbox"  games,  like  Grand  Theft 
Auto,  are  good  examples.  If  you  look  at  text  adventure 

in  four  directions  and  shoot  at  a  ship.  Compare  that 
to  one  that  gives  you  a  description,  asks  you  what  you 
want  to  do  next,  and  you  can  type  anything.  That's 
what  made  them  so  innovative  for  their  time.  It  was  a 
completely  foreign  and  mythical  idea. 


rights  and  preserving  history?  I  generally  violate  the 
copyrights  of  obscure  material  whose  pedigree  is  lost 
or  which  obviously  was  never  part  of  a  money-making 
entity.  The  core  of  a  lot  of  my  stuff  comes  from  an  era 
when  it  was  impossible  to  track  back  the  origin.  In  the 
case  of  “abandonware,"  there  are  three  layers:  duplicating 
it  for  your  own  use,  duplicating  it  to  sell  it  and  duplicating 
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it  to  distribute  it  widely.  I  have  very  little  problem  with 
the  first,  I  flip  out  over  the  second,  and  I  go  back  and 
forth  on  the  third.  That's  why  Textfiles.com  has  no  ads. 


You  recently  purchased  a  physical  storage  unit, 
dubbed  the  “Information  Cube,”  to  house  historical 
software,  magazines  and  the  like.  Vet  in  this  digital 
age,  access  to  physical  data  is  limited.  What’s  your 

do  with  history  is  be  there  when  it  happens,  so  I'm 
trying  to  be  the  guy  from  the  future  who  travels  back 
to  the  past,  grabbing  journals  and  magazines.  There’s 

a  lot  of  data  that  we  don’t  know  needs  to  be  saved. 

The  only  reason  this  stuff  isn’t  already  in  a  museum  is 
because  museums  haven't  expanded  for  them  yet  — 
but  all  indications  are  that  they're  going  to. 

My  goal  is  to  digitize  [the  contents]  or  give  it  to  a 
more  appropriate  archive.  Right  now,  it’s  relatively 
trivial  for  me  [to  store  the  materials].  And  to  get  what  I 
have  online,  I  need  the  original  hardware  —  and  even 
that  is  getting  easier:  It  wasn’t  until  February  2010 
that  a  USB  5.25-in.  floppy  controller  card  came  out.  We 
never  know  what’s  going  to  come  along. 


in  late  2009,  you  successfully  used  the  online  funding 
tool  KickStarter  to  raise  $20,000  to  make  digital 
history  your  full-time  Job.  How  do  you  intend  to  make 


investment?  I've  tried  to  be  aware  of  wbat  people  were 
paying  me  to  do,  and  I’ve  tried  to  be  careful  not  to  be 
either  wasteful  or  nonproductive  —  but  the  problem  is 
that  a  lot  of  my  stuff  was  slow-simmering  and  is  now 
coming  to  a  boil.  Once  Get  Lamp  is  a  sold  product,  I 
expect  it  to  support  me  for  the  next  year  or  so. 


Facebook,  Wikipedia  and  even  Apple’s  iPad  have 
recently  gotten  some  bad  press  for  being  centralized 
services  under  the  control  of  a  single  entity.  Where  is 
all  this  headed?  People  think  Facebook  is  an  unstop¬ 
pable  juggernaut  and  we  have  to  fight,  because  if  we 
don’t,  it'll  always  be  like  this.  But  something  better  will 
come.  It’s  really  bad  to  flip  out,  as  if  this  were  life  and 
death.  At  the  same  time  that  there  was  the  Altair  and 
the  Atari  800  and  the  Apple  II,  we  still  had  the  Atari 
2600  and  the  NES  —  two  completely  closed  systems 
that  worked  dependably.  We  lived  with  it,  it  was  fine, 
and  now  they’re  gone  and  there  are  other  things. 

So  yeah,  Facebook  is  pretty  terrible  with  privacy, 
and  I’m  bothered  by  the  number  of  people  who  happily 
defend  ease  over  freedom.  But  Facebook  won’t  survive 
more  than  another  five  years  in  its  current  form.  Look 
at  MySpace  or  Friendster  or  Orkut.  There’s  a  lot  of 
space  in  the  ecosystem. 

Is  your  tweeting  as  Sockington  a  parody  of  Twitter?  The 

constantly  updating  format  allows  him  to  make  cultural 
references  that  are  cliches  on  Facebook  or  Twitter,  but 
that  comes  bom  doing  three  jokes  a  day  for  three  years. 

-  Interview  try  Ken  Gagnd 


1  VCAP 
FOR  FREE! 


You  spoke,  we  listened.  With  over  1,000  in-house  developers, 

1&1  has  been  working  hard  to  create  feature-packed  website  plans 
to  meet  the  needs  of  even  the  most  demanding  web  professional. 
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1&1®  FREE  HOSTING  PACKAGE 

■  2  Domain  Names  Included 
(.com,  .net,  .org,  .info  or  .biz) 

■  150  GB  Web  Space 

■  UNLIMITED  Traffic 

■  10  FTP  Accounts 

■  25  MySQL  Databases  (100  MB) 

■  Extensive  Programming  Language 
Support:  Perl*  Python*  PHP  5/6 
(beta)  with  Zend*  Framework 

■  1.200  E-Mail  Accounts  (IMAP/  POP3) 


Get  started  today,  call  1-877-GO-1AND1 


www.1and1.com 
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JOHN  D.  HALAMKA 

For  Everything 
There  Is  a  Process 


When  you're 
asked  to  be 
Solomon,  it's 
important  not 
to  counter 
emotion  with 
more  emotion. 


at  CareGroup  Healthcare 
System.  CIO  and  associate 
dean  for  educational 
technology  at  Harvard 
Medical  School,  chairman 
of  the  New  England  Health 
Electronic  Data  Interchange 
Network,  chairman  of 
the  national  Healthcare 
Information  Technology 
Standards  Panel  and  a 
practicing  emergency 
physician.  Vou  can 
contact  him  at  jhalamkag 
caregroup.harvard.edu. 


HOW  SHOULD  CIOs  react  when  asked  to  play  Solomon?  It  happens 
fairly  often.  Points  of  contention  develop  within  the  IT  ranks,  or 
between  IT  and  the  business  units,  escalating  until  they  reach  the 
person  in  charge.  When  it  happens,  remember  that  there  is  a  proc¬ 


ess  for  every  situation,  no  matter  how  emotional 
or  urgent.  Here’s  my  guidance: 


difficult  to  resolve  by  e-mail.  This  means  that 
you  either  pick  up  the  phone  or  schedule  a  quick 
meeting  with  stakeholders.  It’s  generally  best  to 
schedule  such  meetings  rapidly  to  prevent  further 
misunderstandings  and  angst.  At  the  meeting, 
your  role  as  the  leader  is  to  listen  and  accept 
responsibility,  even  if  the  situation  is  not  directly 
caused  by  you  or  your  staff.  When  I  have  chal¬ 
lenging  conversations  with  vendors,  I’m  always 
impressed  by  CEOs  who  take  an  active  role  in 
problem  resolution  even  when  responsibility  for 
the  root  cause  is  not  clear. 

Build  a  reasonable  path  forward.  The 
challenge  of  being  a  leader  is  that  demand  for 
resources  —  staff  time  and  budgets  —  always 
exceeds  supply.  I  have  to  be  careful  not  to  over¬ 
promise  and  underdeliver.  Thus,  I’ll  work  with  the 
stakeholders  to  develop  reasonable  next  steps  that 
include  short-term  wins,  governance  committee 
discussions,  and  phased  delivery  of  solutions  in 
the  long  term. 

instead  of  saying  “Mo,”  say  “Mot  now.”  Some¬ 
times  it’s  tempting  to  just  say  no  to  a  request  that 

A  better  approach  is  to  submit  the  request  to  a 
governance  committee,  so  that  the  prioritization 
will  be  done  by  a  group  representing  many  institu¬ 
tional  interests.  The  committee’s  answer  might  be 
“Not  now,  but  we’ll  put  it  in  the  queue,”  which  is 
more  satisfying  than  “No." 

Be  the  honey,  not  the  vinegar.  It’s  easier  to 


persuade  people  if  you  use  polite  arguments  and 
Battery  than  if  you  are  confrontational.  As  a  CIO, 
I  have  complete  accountability  for  all  IT-related 
issues,  but  1  don’t  have  blanket  authority.  It  might 
seem  great  to  be  a  benign  dictator  who  could  just 
say  “Make  it  so,”  but  even  benign  dictators  can 
be  overthrown.  It’s  wiser,  then,  to  use  informal 
authority,  build  trust,  create  consensus  and 
develop  a  guiding  coalition.  I  do  that  with  humor, 
optimism  and  enthusiasm.  Doing  it  by  yelling, 
intimidating  or  exercising  formal  authority  might 
work  in  the  short  term,  but  it  destroys  trust  and 
loyalty  in  the  long  term.  I’ve  been  a  CIO  for  nearly 
15  years,  and  I  think  that’s  because  I  always  use 
honey  rather  than  vinegar. 

Don’t  throw  people  under  the  bus,  especially 
your  own  staffers.  I've  known  many  leaders  who 
are  quick  to  place  the  blame  on  someone  else 
as  a  way  of  deflecting  responsibility.  It’s  always 
awkward  to  be  in  a  meeting  when  someone,  often 
without  warning,  is  identified  as  the  root  cause  of 
a  problem.  To  me,  people  are  rarely  the  toot  cause 
—  it’s  the  project  management  and  the  governance 
that  were  flawed  and  enabled  people  to  do  the 
wrong  thing.  Thus,  I  never  shoot  the  messenger 
or  point  fingers.  Instead,  I  ask  how  we  can  all  do 
better  by  changing  the  way  we  work. 

Every  day,  I  have  several  challenging  meetings. 

I  know  that  there  will  be  confrontations,  tough 
questions  and  even  misunderstandings  based  on 


every  meeting,  I  know  there  is  a  process  to  resolve 
every  issue  without  requiring  me  to  counter 
emotion  with  more  emotion.  • 


Got  an  award-worthy 

Bl  or  analytics  project? 

Nominate  it  to  our  awards  program! 


^  I  SliAiSyTICS  PERSPECTIVES 

Best  Practices 

INMMULYTICS 


AWARDS  PROGRAM 


Monday,  August  16, 2010  ] 


Computemorld's  Bl  and  Analytics  Perspectives  conference  is 
seeking  IT  user-organization  case  study  submissions  for  its  Best 
Practices  in  Bl  and  Analytics  Awards  Program.  Award  winners  will  be 
featured  not  only  on  the  event  website  and  in  all  conference  literature, 
but  also  on  Computerworld.com  and  in  Computerworid  magazine. 

Additionally,  all  award  recipients  will  have  the  opportunity  to 
participate  in  a  lively  panel  discussion  at  the  conference.  Share 
your  winning  project  and  Bl  strategies  with  other  honorees  and 
conference  attendees  -  and  gain  recognition  for  your  team  today! 


CATEGORIES: 

Running  the  Business  on  Bl 

Nominations  in  this  category  use  predictive  analytics  to  pinpoint 
opportunities  and  have  enabled  broad  information  access  and 
!  delivery  for  strategic  decision-making. 

Driving  Process  Change  with  Bl 

Nominations  in  this  category  have  used  Bl  to  streamline  business 


Integrating  Bl  Across  the  Organization 

Nominations  in  this  category  use  Web  2.0  data  streams  or  tools, 
self-service  portals,  analytics  and/or  open  source  tools  to  drive 
insights  across  a  wide  range  of  data  stores  and  applications. 

Improving  Results  through  Cloud-Based  Bl 

Nominations  in  this  category  demonstrate  successful  applications 


“  I  Bl  &  ANALYTICS  PERSPECTIVES 
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To  nominate,  visit 

and  select  “Awards” 


COVER  STORY 


boosted  self-service  orders  from  5%  to  55%  injusfo 
cutting  costs  and  inspiring  click-to-order  uses  in  otl 
FiOS  lineup  too. 

“He  hit  a  gold  mine,"  says  Shaygan  Kheradpir,  Cl 


Kheradpir  says  the  junior  programmer's  ability  to  run  with  an 
innovative  idea  wasn’t  a  fluke;  Verizon’s  IT  shop  is  designed  to 
enable  that  kind  of  innovation  to  happen  again  and  again. 

“The  underlying  mission  for  Verizon  IT  is  to  look  for  oppor¬ 
tunities  where  IT  can  make  a  quantum  leap  in  performance  for 
the  business,”  Kheradpir  says. 

IT  leaders  at  other  companies  share  Kheradpir's  outlook.  The 
eys  to  making  innovation  a  sustainable  process,  they  say,  include 
mderstanding  the  business  inside  and  out,  setting  up  a  team 
dedicated  to  trying  new  ideas,  and  not  being  afraid  to  foil. 

Verizon  Communications 


[Our  mission] 
is  to  look  for 
opportunities 
where  IT  can  make 
a  quantum  leap  in 
performance  for 
the  business. 


COVER  STORY 


Workers  form  partnerships  with  their  connec¬ 
tions  on  the  business  side,  and  they  develop 
plans  with  milestones  that  allow  the  team  to 
learn  and  correct  as  they  go. 

“We  ask,  ‘Tomorrow,  8  a.m.,  what  are  we 
going  to  do  different?  What  are  you  going  to 
show  me  next  week?  So  we  give  them  a  little  bit 
of  leeway  and  see  what  they  can  do,”  Kheradpir 
says.  "So  through  this  process,  if  they  keep 
going  and  we  see  some  proof  of  concept  and 
we  see  it's  a  big  idea,  we  start  to  give  more 
resources  and  really  blast  out  the  thing.” 

Kheradpir  calls  it  "disciplined  innovation 
with  focus  and  accountability.” 


THE  HIDING  BLOCKS 
OF  INNOVATION 


■  **w  •■**■*•«•  On  rltfM  to  ML  Create  an  environment  that  doesn't 
punish  workers  for  having  tried  something  that  ultimately  didn't  work,  "it's 

hard  to  innovate  when  you're  afraid  to  be  wrong  or  make  a  mistake.  Part  of 
innovation  is  stretching  or  thinking  outside  the  bo*,  and  more  often  than 
not,  you're  wrong."  says  Philip  Garland,  leader  of  the  DO  advisory  practice  at 
PricewaterhouseCoopers. 


driven  innovations,  it  needs  to  understand  and  annHafe  how  it  wa  help 
"ultimately,  there  are  a  lot  of  great  mings  we  can  do.  but  If  it  doesn't  furkb- 
have  (item).' he  says. 

■  0r*—*  *  rewtiwf  rwr  ariMry  for  Mews  and  avartnati.  Garland 
likes  the  idea  of  innovation  labs  or  centers,  housed  within  the  IT  depart¬ 
ment,  where  people  can  try  out  new  gadgets  or  gather  to  hear  from  vwi- 


someone  needs  to  take  on  the  role  of  facilitator  to  prioritize  and  guide  Ideas 

through  the  development  process.  That  person  could  be  the  CKX  an  innova- 


mediate  business  impact  as  well  as  pie-in-the-sky  tei 
Consider,  she  says,  her  innovation  groups  search 
gies  to  help  handle  food  and  beverage  orders  on 


screen  that’s  right  at  their  fingertips.  But  the  ii 
novation  group  is  looking  beyond  that,  workin 
with  service  managers  to  study  how  servers 
now  wait  on  customers  in  other  areas  of  the 
casinos,  such  as  at  the  gaming  tables. 

“They  did  a  lot  of  work  around  figuring  out 
the  details  of  how  it  ought  to  work  and  the 
processes  so  we  can  think  of  technologies  to 
support  those  processes,”  Lane  says. 


If  you  don’t 
protect  your 
innovators  from 
the  day-to-day 
stuff,  you  won’t  be 
able  to  innovate. 


jy.  I  he  consulting  and  IT  services  firm  replaced 
cations  network  between  2007  and  2009,  and  its 
ns  go  back  only  about  10  years. 
fs  handling  the  everyday  duties  of  IT  is  important 


■verywhere,' "  he  says. 

For  example,  the  company  started  using 
Cisco  Systems  Inc.’s  Telepresence,  a  high-end 

Telepresence  at  60  sites.  Modruson  notes  that 
without  the  updated  network,  he  might  not  have 
had  the  capacity  to  introduce  this  technology. 

“When  something  like  this  comes  along, 
you  have  to  be  ready  for  it,''  he  adds. 

But  you  also  have  to  know  what's  coming. 
For  that,  Modruson  relies  in  part  on  Accen¬ 
ture's  Technology  Labs,  an  R&D  unit  that 
experiments  with  new  technologies. 

He  also  relies  on  key  team  members  who 
“push  the  whole  organization  to  try  something 
different.”  Modruson  has  "the  Beta  Team"  —  a 
few  techies  bored  with  current  technologies 
who  are  charged  with  trying  out  new  ones. 


Accenture  PLC 

In  order  to  continually  de 


“We're  trying  to  keep  it  s 
explains,  “because  innoval 
people  just  throwii — ‘ 


COVER  STORY 


Workers  form  partnerships  with  their  connec¬ 
tions  on  the  business  side,  and  they  develop 
plans  with  milestones  that  allow  the  team  to 
learn  and  correct  as  they  go. 

“We  ask,  'Tomorrow,  8  a.m.,  what  are  we 
going  to  do  different?  What  are  you  going  to 
show  me  next  week?  So  we  give  them  a  little  bit 
of  leeway  and  see  what  they  can  do."  Kheradpir 
says.  “So  through  this  process,  if  they  keep 
going  and  we  see  some  proof  of  concept  and 
we  see  it's  a  big  idea,  we  start  to  give  mote 
resources  and  really  blast  out  the  thing." 

Kheradpir  calls  it  "disciplined  innovation 
with  focus  and  accountability." 

Inttra  Inc. 

leffrey  Pattison  says  that  when  he  started  as 
CIO  at  Inttra  Inc.,  a  Parsippany,  N.J.,  company 
that  provides  e-commerce  systems  to  the  ocean 
height  industry,  he  inherited  an  IT  group  that 
was  "innovation-averse.”  The  staffers  felt  their 
main  job  was  "to  pump  transactions  through." 

But  Pattison  wanted  a  staff  that  wasn't  afraid 


[Our  mission] 
is  to  look  for 
opportunities 
where  IT  can  make 
a  quantum  leap  in 
performance  for 


to  model  it  out  and  mock  it  up,"  he  s.v 
“Because  if  you  don’t  protect  your  inn 
from  the  day-to-day  stuff,  you  won’t  b 

But  Pattison  says  his  promotion  of  i 

have  some  leeway,  but  they  also  need 
on  delivering  innovations  that  drive  b 

in  our  industry.  So  you  have  to  look  at 
the  end  goal,”  he  says. 

To  help  ensure  that  that  happens,  tt 
novators  partner  with  others  in  the  bu 
better  understand  where  changes  and 
ments  are  needed.  For  example,  they  r 
met  with  international  shippers  to  eva 
what’s  needed  in  a  new  electronic  freig 
ment  settlement  program  that's  in  the 

Harrah’s  Entertainment  Inc 

As  part  of  her  job  as  chief  technology  i 
Harrah's  Entertainment,  Katrina  Lain 
sees  a  small  team  of  workers  who  mak 
the  casino  operator's  innovation  group 
says  this  seven-person  team  looks  at  tl 
technology  to  figure  out  whether  any  < 


He  says  one  of  the  most  important  steps  has  been  the  creation 
of  a  separate  group  of  about  10  workers  who  are  freed  up  from 
routine  responsibilities.  “You  really  need  to  have  an  R&D 
department,  so  when  they  have  an  idea,  we  have  the  bandwidth 


“If  it  doesn’t,  then  we  figure  they’re  not  stretching  enough/’  she  says. 
She  notes  that  failure  could  mean  that  a  technology  didn't  work  or 
that  it  worked  but  didn’t  deliver  the  expected  business  results. 
Lane  says  it’s  important  to  have  people  dedicated  to  this  task. 


INNOVATION:  TRENDY 
TOPIC,  HARD  TO  DO 


“Innovation  in  IT  is  an  increasingly  popular  topic  especially  now  that  the 
economy  shows  some  signs  of  life.'  says  Philip  Garland,  a  partner  and  CIO 
advisory  solution  leader  at  PricewaterhouseCoopers. 


To  some,  planning  for  innovation  might  seem  like  a  quixotic  quest  to  cap¬ 
ture  lightning.  But  innovation  can  be  less  about  a  single  successful  strike 
and  more  about  repeated  hits  that  are  planned  for  and  targeted.  The  key  is 
knowing  how  to  inspire  and  encourage  innovation. 

“There  are  millions  of  Ihings  right  in  from  of  our  noses  that  we  accept  every 
day.  and  someone  will  come  in  and  say  we  don’t  have  to  do  it  that  way.  and  it 
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will  be  an  a-ha  moment.  And  after  that  it  will  be  wave  after  wave  of  innova¬ 
tion;  says  lan  Hayes,  president  of  Clarity  Consulting  Inc.  in  Beverly.  Mass. 

But  Hayes  says  many  IT  organizations  aren't  set  up  to  allow  for  innova¬ 
tions.  Often.  staffers  are  so  mired  in  the  daily  grind  that  they  just  focus  on 
getting  through. 

“Most  IT  departments  are  so  far  away  from  being  able  to  hit  home  runs, 
and  this  economy  made  it  worse  because  of  all  the  cutbacks.  So  you  may  oc¬ 
casionally  get  someone  who  has  that  great  idea,  but  everything  is  set  up  for 
them  not  to,“  he  contends.  “And  then  the  organizational  stuff  -  the  'We  don't 
want  a  distraction  right  now'  -  serves  to  push  that  innovative  idea  aside." 

Hayes  says  IT  organizations  that  repeatedly  deliver  innovations  devote  at 
least  some  resources  to  it.  They  often  have  a  separate  group  that  can  take  a 
step  back  and  ask  whether  the  company  could  be  doing  something  differently. 

“But  you  also  need  a  way  to  bring  those  ideas  up.  to  get  to  decision-makers 
who  can  say.  'Yes.  we  can  try  this.-  “  he  adds.  And  IT  needs  someone  to  act  as 
a  salesperson  -  someone  who  will  serve  as  an  advocate  and  articulate  why 


THE  BUILDING  BLOCKS 
OF  INNOVATION 


■  Give  employees  the  right  to  f»M.  C  reate  an  environment  that  doesn't 
punish  workets  for  having  tried  something  that  ultimately  didn't  work,  "it's 
hard  to  innovate  when  you're  afraid  to  he  wrong  or  make  a  mistake.  Part  of 
innovation  is  stretching  or  thinking  outside  the  box.  and  mote  often  than 
not,  you're  wrong."  says  Philip  Garland,  leader  of  the  CIO  advisory  practice  at 
PricewaterhouseCoopers. 


tion,  top  to  bottom.  "Anyone  can  have  a  good  idea."  Garland  says. 
Besides,  if  just  a  few  people  champion  innovation,  it  could  go  away 


when  those  people  move  on  to  other  companies. 

o  Develop  partnerships  with  other  departments.  To  sell  technology- 
driven  innovations,  IT  needs  to  understand  and  articulate  how  it  will  help 
the  company  reach  its  goals,  says  lan  Hayes,  president  of  Clarity  Consulting. 
■Ultimately,  there  are  a  lot  of  great  things  we  can  da  but  if  it  doesn't  funda¬ 
mentally  drive  something  that  affects  the  bottom  line,  then  it's  just  a  nice-to- 
have[iteml."hesays. 


likes  the  idea  of  innovation  labs  or  centers,  housed  within  the  IT  depart¬ 
ment,  where  people  can  try  out  new  gadgets  or  gather  to  hear  from  vari¬ 
ous  sources,  such  as  vendors  or  outside  speakers,  about  bleeding-edge 
technologies. 


process  for  taking  a  promising  idea  and  testing  it  out.  Garland  says.  Similarly, 
someone  needs  to  take  on  the  role  of  facilitator  to  prioritize  and  guide  ideas 
through  the  development  process.  That  person  could  be  the  CIO.  an  innova¬ 
tion  officer  or  another  key  leader. 


“You  do  need  to  have  people  doing  that  as  their  c 
focus  a  little  bit  too  much  on  incrementality."  Lan 

well  as  thinking  about  long-term  objectives.  "We  < 
the  group  on  both  shorter  and  longer  term,  so  we 
mediate  business  impact  as  well  as  pie-in-the-sky  I 
Consider,  she  says,  her  innovation  group's  searc 
gies  to  help  handle  food  and  beverage  orders  on 
the  casino  floors.  Harrah's  is  already  rolling  out 
self-service  programs  at  slot  machines,  where 
gamblers  can  order  through  a  small  touch 
screen  that’s  right  at  their  fingertips.  But  the  in¬ 
novation  group  is  looking  beyond  that,  working 
with  service  managers  to  study  how  servers 

casinos,  such  as  at  the  gaming  tables. 

“They  did  a  Ipt  of  work  around  figuring  out 
the  details  of  how  it  ought  to  work  and  the 
processes  so  we  can  think  of  technologies  to 
support  those  processes,"  Lane  says. 

She  asserts  that  it's  crucial  to  manage  the 
innovation  process;  it's  not  something  that  will 


lay  job  or  you’ll 
e  says,  adding 


If  you  don't 
protect  your 
innovators  from 
the  day-to-day 
stuff,  you  won’t  be 
able  to  innovate. 


legacy  technology.  The  consulting  and  IT  services  firm  replaced 
its  telecommunications  network  between  2007  and  2009.  and  its 
oldest  applications  go  hack  only  about  to  years. 

Modruson  says  handling  the  everyday  duties  of  IT  is  important 
because  it  makes  rolling  out  innovations  easier.  “The  last  thing 
you  want  is  to  have  a  success  and  then  say.  ‘Wait  a  minute.  We 


For  example,  the  company  started  using 
Cisco  Systems  Inc.’s  TelePtesence.  a  high-end 
videoconferencing  system,  in  2008.  It  now  has 
Telepresence  at  60  sites.  Modruson  notes  that 
without  the  updated  network,  he  might  not  have 
had  the  capacity  to  introduce  this  technology. 

“When  something  like  this  comes  along, 
you  have  to  be  ready  for  it."  he  adds. 

But  you  also  have  to  know  what’s  coming. 
For  that,  Modruson  relies  in  part  on  Accen¬ 
ture’s  Technology  Labs,  an  R&D  unit  that 
experiments  with  new  technologies. 


MANAGEMENT 


are  common  when  big 
tech  projects  go  awry. 
Group  hug,  anyone? 


effort,  Hagerup  says.  Some  negative  feelings  about  a  poor 
outcome  were  probably  inevitable,  but  it  would  have  helped  if 
there  had  been  some  empathy  for  the  IT  team,  he  says. 

He  wishes  IT  management  had  sat  down  with  his  team  and  let 
them  talk  through  their  anger  at  the  unreasonable  deadline  and 
the  lack  of  support.  Even  some  simple  words  of  appreciation  for 
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their  efforts  would  have  been  a  big  help,  Hagerup  says. 

As  his  group  eventually  proved,  the  project’s  scope  was  too  large 


U  [Techies’]  strength  is 
thinking.  We’re  great 
problem-solvers; 
we  tend  to  forget  feelings. 


How  fast  does 


a  system  have 
to  be  to  capture 
a  business 
opportunity? 


He  thinks  his  team  would  have  come  out  of  its  funk  faster  if  man¬ 
agers  had  talked  to  them  about  what  had  happened  and  how  they 
felt  about  having  their  project  regarded  as  a  failure.  But  that  reac¬ 
tion  “is  just  not  in  the  playbook  of  the  typical  CIO,”  Hagerup  says. 

Taking  the  News  Hard 

Projects  that  are  killed  when  business  needs  change  might  seem  like 
the  easiest  for  team  members  to  shrug  off,  since  it’s  no  one’s  fault. 


Hiljj!1 

Hi 


MANAGEMENT 


While  morale  in  IT  was  terrible  during  the  project,  she  says 
there  wasn’t  much  in  the  way  of  postproject  depression.  "They 
were  happy  that  we  had  a  network  that  worked,”  says  Gietl.  Her 
transparency  eased  some  of  the  tension,  Gietl  feels,  and  though 
the  lawyers  joked  pointedly  about  “computerless  Fridays”  for  a 


too  long;  if  you  do,  people  may  already  have  rationalized  what 
happened  or  forgotten  what  went  wrong. 

In  the  end,  managers  need  to  remember  that  what  gets  IT 
people  going  is  the  chance  to  learn  new  things  and  develop  new 
skills,  says  Corless.  To  that  end,  the  best  way  to  help  employees 
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Visualize 

FIRST 

Build  Later 


shy  about  stating  her  requirements.  The  ideal  system,  she  said,  would 
generate  a  valid  electronic  signature  from  a  physician,  which  is  nec¬ 
essary  to  process  insurance  claims  but  often  a  challenge  to  obtain. 

“This  is  something  we  were  dreaming  of  for  a  long  time,”  says 
Scheetz,  the  outpatient  supervisor  at  MD  Anderson  Cancer  Center 
in  Houston.  The  new  system  will  allow  hospital  staffers  to  treat  an 
online  consultation  as  a  signed  order  generated  by  a  physician. 

Perhaps  best  of  all,  Scheetz  and  her  colleagues  got  to  see  the 
system  before  it  was  even  developed. 

The  hospital’s  technology  team  used  a  software  tool  called  iRise, 
which  allows  enterprises  to  simulate  and  create  images  of  what  soft¬ 
ware  applications  will  look  like  before  actual  development  occurs. 
They  aren't  working  prototypes;  rather,  they're  "acting”  applications 
with  a  finished  lock  and  feel,  but  with  no  coding  behind  them. 


Simulation  tools  show  users  what  applications  will  look  like  - 
before  actual  coding  begins,  by  esther  shein _ 
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DEVELOPMENT 


[For]  any  app  with  a  user  interface,  you've  got  to  have  a  pretty 
compelling  reason  why  you  wouldn't  use  visualization  on  that  project 

HARK  HILBUSH,  VICE  PRESIDENT  OF  INFORMATION  SYSTEMS.  UNITED  PARCEL  SERVICE  INC. 


Scheetz  and  others  in  her  department  worked  with  business 
analysts  at  MD  Anderson.  They  all  used  iRise  to  hash  out  what 
they  wanted  in  the  physician  order  system,  and  then,  several 
months  later,  they  could  see  the  first  version. 

IRise  is  the  flagship  offering  of  privately  held  software  vendor 
iRise  Inc.  in  El  Segundo,  Calif.  It’s  one  of  several  products  emerg¬ 
ing  to  tackle  the  old  problem  of  ensuring  that  software  develop¬ 
ers  build  what  the  business  stakeholders  really  need. 

“With  increasingly  scarce  resources,  there  isn’t  any  margin  for 
error.  So  if  there’s  a  disconnect  between  what  you  create  and  what 
the  business  actually  needed,  the  costs  of  failure  are  [more  pro¬ 
nounced]  in  this  economy,”  says  IDC  analyst  Melinda-Carol  Ballou. 

That’s  where  visualization  comes  in.  Typically,  developing  a 
software  application  for  beta  testing  can  take  months,  even  with 
newer  agile  development  methods.  But  application  visualization 
can  be  done  within  a  matter  of  hours  to  give  users  some  insight 
into  what  that  system  will  look  like  and  how  it  will  work.  It  also 
allows  for  early  discovery  of  whether  a  developer  has  missed  the 
mark  in  terms  of  creating  what  the  user  wants. 


“There’s  an  increasing  awareness  that  this  is  a  problem  worth 
investing  in,  because  people  will  waste  a  lot  of  time  in  cycles  of 
redesign,”  says  Tom  Grant,  an  analyst  at  Forrester  Research  Inc. 

However,  he  says  the  few  tools  that  are  currently  available 
aren’t  widely  used.  The  biggest  challenge  these  vendors  have. 
Grant  contends,  is  the  cultural  issue  of  trying  to  get  companies  to 
move  away  from  using  applications  like  spreadsheets  and  Power¬ 
Point  to  get  users  to  articulate  their  requirements. 

Modeling  the  User  interface 

Mark  Hilbush,  vice  president  of  information  systems  at  United  Parcel 
Service  Inc.,  is  a  big  believer  in  using  tools  to  improve  collabora¬ 
tion  among  developers  and  users.  “The  idea  is  to  get  as  much  [as 
possible]  right  upfront,  and  to  try  to  woik  with  business  users  in  a  way 
they  can  really  understand  what  it  is  we’re  building  together,”  he  says. 

Hilbush ’s  group  is  building  a  Web-based  application  that  will 
be  used  in  UPS  operations  all  over  the  world.  Using  iRise’s  Studio 
tool,  IT  has  been  able  to  model  different  aspects  of  the  user 
interface,  he  says. 


DEVELOPMENT 


More  Ways  to  See 
User  Requirements 


Blueprint  Software  Systems  me. 


Rayenf  low. 


Microsoft  Corp.'s 


IBM 


"We  were  able  to  put  the  visualization  in  front  of  users  who  ace 
across  the  United  States  and  Europe  and  the  Asia-Pacific  region,  and 
|iRise]  allowed  us  to  get  many  more  people  involved  in  the  require¬ 
ments  process  than  would  normally  be  involved,”  Hilbush  explains. 

Not  only  has  the  tool  enabled  IT  to  quickly  uncover  requirements 
that  management  may  not  have  articulated,  but  it  also  has  allowed 
Hilbush 's  group  to  get  direct  feedback  from  people  who  are  going 
to  use  the  system  on  a  day-to-day  basis.  "The  last  thing  you  want 
is  to  get  to  alpha  or  beta  or  user  testing  and  find  out  you've  missed 
the  mark  on  a  few  key  requirements,”  he  says.  That  s  the  power  of 
visualization  —  it  lets  you  do  that  very  early  in  the  life  cycle.” 

For  this  gkiba!  project,  a  big  benefit  was  that  non-English  speak¬ 
ers  could  see  the  prototype  to  make  sure  key  requirements  weren’t 

translation,  says  Tony  Baldassari,  a  senior  project  manager  in  UPS's 
package  project  management  group.  But  sending  out  a  prototype  lets 
people  visualize  what  the  new  system  will  look  like  and  therefore 

helps  ensure  that  it's  built  correctly  from  the  start,  Baldassari  says. 

UPS's  new  application,  an  international  operations  process¬ 
ing  system  to  clear  shipments  from  country  to  country,  has  been 
reviewed  several  times.  People  have  been  able  to  see  all  of  the 
visual  parts,  including  screens,  links  and  how  they  would  navi¬ 
gate  through  the  pages,  says  Baldassari. 

Once  users  put  their  comments  into  iRise.  his  group  gathers  the 
feedback,  consolidates  it  and  reworks  the  design  before  sending  out 
another  round  of  screenshots  for  viewing.  “It  allows  us  to  iterate 
very  quickly  and  get  feedback  and  comments  and,  if  needed,  a 
Round  3.  By  the  time  we've  done  that,  were  pretty  confident  we 
have  very  good  buy-in  from  all  the  users,"  says  Baldassari.  “We 


finalize  that  with  IT,  and  it  saves  time  in  the  develop¬ 
ment  cycle." 

UPS  uses  iRise  as  part  of  the  requirements- 
gathering  process  for  systems  that  will  be  used  inside 


that  has  a  user  interface,  Hilbush  says,  and  in  2009  it 
was  used  on  43  projects  out  of  47  that  were  identified 
as  potential  candidates  for  iRise. 


“Our  philosophy  is  if  you  have  a  Web  application  or 
a  Windows  app  —  or  any  app  with  a  user  interface  — 
you've  got  to  have  a  pretty  compelling  reason  why  you 
wouldn't  use  visualization  on  that  project,”  says  Hilbush. 

While  he  declined  to  give  specifics  on  the  cost 
of  implementing  iRise,  Hilbush  says  UPS  has  seen 


changes  during  the  project  life  cycle  and  fewer  defects 
later  on  in  development. 


I  Lessons  Learned 

At  MD  Anderson  Cancer  Center,  officials  used  iRise 
to  develop  an  electronic  medical  records  (EMR) 
system  called  Clinic  Station.  As  a  hospital  special¬ 
izing  in  cancer  care,  MD  Anderson  found  that  out-of 
the-box  EMR  systems  with  predefined  requirements 
did  not  meet  its  needs,  because  those  packages  are 
designed  for  acute  care  centers,  says  Sherry  Preston, 
business  analyst  manager  of  MD  Anderson's  EMR 
development  and  support  team.  The  hospital  spent  about  eight 
years  trying  to  get  three  different  EMR  tools  customized,  but 
none  worked.  “The  bugaboo  is  the  workflow,”  she  notes. 

So  hospital  management  decided  to  develop  its  own  unique 
system  and  train  clinicians  like  Preston  —  who  understood 
the  nuances  of  nursing,  pharmacies,  labs.  X-rays  and  medical 
records  —  to  become  business  analysts  and  work  with  end  users 
on  getting  input  on  the  different  modules  that  they  wanted  to 
interact  with  Clinic  Station.  “It  was  important  because  we  had  to 
be  able  to  document  and  elicit  requirements  and  understand  the 
workflow  of  each  corner  of  the  hospital,”  explains  Preston,  who 
worked  as  a  nurse  in  MD  Anderson  clinics  for  26  years. 

Preston  estimates  that  the  hospital  spent  less  than  $300,000 
to  purchase  iRise.  She  says  there  is  very  little  about  the  tool  that 
users  don’t  like,  but  learning  how  it  works  takes  a  significant 
amount  of  time,  and  “if  you  don't  use  it,  you  will  lose  it." 

Another  lesson  learned:  Preston  says  the  iRise  software  re¬ 
quired  MD  Andersen  to  buy  extra  memory  for  business  analysts' 
laptops.  It  was  important  to  deploy  iRise  on  laptops,  because 
analysts  generally  use  the  iRise  software  in  meetings  with  users. 
The  need  for  more  memory  “caught  us  by  surprise,”  Preston  says. 

UPS's  Hilbush  emphasizes  that  “you  need  to  do  the  iRise  simula¬ 
tion  as  early  in  the  development  cycle  as  possible"  and  make  sure 
business  users,  business  analysts  and  developers  are  involved.  “If 
done  well,  the  process  is  very  open  and  collaborative,”  he  says. 

MD  Andersen  has  cut  about  25%  off  of  its  overall  development 
time  by  using  simulation,  says  CIO  Lynn  Vogel.  “Our  dream 
would  be  if  simulation  would  generate  all  the  code.  But  that’s  a 
very  difficult  process.  Coding  is  as  much  an  art  as  a  science.”  ♦ 
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Offshoring:  What  Can  Go? 

Our  security  manager  is  willing  to  outsource  some  tilings, 
but  others  are  simply  out  of  the  question. 

provide  us  with  the  patches  that  they 
deem  necessary  to  our  desktops,  servers 


I’VE  BEEN  asked  to  send  more  of 
our  security  services  offshore,  and 
that  request  has  me  thinking  about 
what  I  would  be  comfortable  with 
outsourcing  and  what  I  would 
never  want  to  risk  putting  in  the  hands 
of  a  distant  provider. 

It’s  difficult  to  counter  the  cost 
argument  for  offshoring.  India  is  the 
lowest-cost  region  that  has  reliable 
network  connectivity,  a  workforce  that 
is  proficient  in  the  English  language,  a 
favorable  tax  regime  and  a  stable  govern¬ 
ment.  Since  it  is  also  safe 
and  easy  to  get  to,  India 
is  our  offshore  location 
of  choice.  And  in  India, 
we  can  get  three  security 
engineers  for  the  cost  of 
one  in  theU.S. 

Currently,  we  offshore  the  manage¬ 
ment  of  security  patches.  Analysts  in 
India  continually  monitor  Microsoft’s 
security  updates,  third-party  sites  and 
forums  that  discuss  vulnerabilities  and 
recommended  security  patches.  The 
analysts  apply  predefined  criteria  to 
figure  out  whether  a  particular  operating 
system  or  application  patch  is  relevant  for 
us  and  determine  the  risks  of  applying 


and  network  so  we  can  install  them 
during  our  maintenance  windows.  If  the 
patches  are  critical  or  need  immediate 
action,  they  are  escalated  accordingly.  All 
of  this  has  been  working  quite  well. 

But  there  are  some  things  that  I  would 
simply  refuse  to  offshore.  For  example, 
investigative  work,  such  as  forensics  or 
anything  that  would  require  adminis¬ 
trative  action  against  an  employee  or 
other  company,  is  just  too  sensitive  to  be 
handled  out  of  house.  I 
also  feel  uncomfortable 
offshoring  the  adminis¬ 
tration  of  our  data  leak 
prevention  infrastruc¬ 
ture,  because  DLP 
devices  contain  some  of  our  company’s 
most  critical  data.  I’d  rather  keep  control 
of  such  information  in  the  U.S. 

But  other  things  do  make  sense.  Intru¬ 
sion  detection  is  one  example.  Intrusion- 
detection  systems  are  not  plug-and-play. 
They  require  updates,  continuous  tuning 
and  careful  response  and  analysis  of 
events.  I  don’t  have  the  staff  to  properly 
manage  our  dozen  IDS  sensors,  and  I 


ensure  a  successful  deployment.  I  might 
even  consider  a  fully  managed  service 
in  which  the  provider  installs  its  own 
sensors.  That  way,  we  could  increase  our 
coverage  to  100%;  we're  currently  at  just 
70%  of  our  network. 

Another  example  is  vulnerability 
management.  We  are  evaluating  Qualys 
to  control  the  devices  we  use  to  scan  our 
internal  address  space.  Since  the  Qualys 
service  is  an  Internet-facing  application, 

I  wouldn’t  mind  providing  access  to  a 
third  party  in  India  to  run  the  scans  and 
process  the  results  on  a  regular  basis. 

Of  course,  if  I  hand  off  all  of  this  work 
to  third  parties,  I  will  still  be  responsible 
and  have  to  answer  to  the  executive 
staff  should  anything  go  wrong.  For  that 
reason,  I  will  still  conduct  periodic  audits 
of  our  service  providers  to  ensure  that 
they  are  meeting  service-level  agree¬ 
ments  and  statements  of  work. 

POP  update 

In  my  previous  column,  I  mentioned  that 
I  would  be  terminating  POP  and  IMAP 

As  anticipated,  there  was  some  fallout, 
and  I’ve  had  to  make  exceptions. 

One  is  related  to  the  e-mail  of 
executives  who  serve  on  the  boards  of 
directors  of  other  companies  and  want 
to  download  mail  from  those  compa¬ 
nies’  e-mail  systems  into  their  Outlook 
clients  here.  The  other  exception  is 
for  the  engineering  collaboration  sites 
that  our  engineers  use  as  they  work  to 
improve  our  products.  To  accommodate 
the  exceptions,  we  will  make  a  rule  in 
our  firewall  infrastructure  to  allow  the 
outbound  POP  and  IMAP  connections 
to  specific  business-required  sites.  ♦ 

This  week’s  journal  is  written  by  a  reol 


security  manager,  “Mathias  Thurman," 
whose  name  and  employer  have  been  disguised 


PAUL  GLEN 


Every  option, 
including 
doing  nothing, 
carries  a  risk. 


Dealing  With  Incompetent 
Peers  Is  Tricky  Business 


i  S  MANAGERS,  we  want  to  root  out  incompetence.  If  we  find  it  in 
l  a  subordinate,  handling  the  situation  probably  won’t  be  simple,  but 
I  it  will  be  straightforward.  An  incompetent  boss  demands  a  com- 
B  pletely  different  approach,  but  at  least  you  know  who  your  allies 


It’s  a  hazardous  business.  Any  approach  you 
take  could  backfire.  These  are  your  options: 

Do  nothing.  Minding  your  own  business  might 
seem  like  a  safe  choice,  but  when  your  peer’s  in¬ 
eptitude  comes  to  light,  it  might  become  apparent 
to  others  that  you  knew  about  it  but  did  nothing. 
So  much  for  being  a  good  team  player. 

Complain  to  some  higher-up  about  the  person. 
The  boss  might  not  know  about  the  problem  and 
might  appreciate  the  heads  up.  On  the  other  hand, 
she  might  not  agree  with  you  and  could  brand  you 
a  complainer,  a  tattletale  or,  worse,  a  schemer. 

Bring  the  matter  to  HR.  A  savvy  and  helpful  HR 
group  might  be  able  to  help  the  person  improve  — 
or  it  could  get  rid  of  him.  But  it  could  also  decide 
that  the  problem  is  really  you.  And  if  HR  talks  to 
your  peer,  he  might  have  no  trouble  figuring  out 
where  the  complaint  came  from.  And,  sadly,  many 
HR  organizations  are  ill  equipped  to  effectively 
judge  the  competence  of  technical  people. 

Try  to  get  the  person  fired.  Engaging  in  office 
politics  of  this  sort  is  a  risky  business.  You  might 
become  a  hero  to  your  staff  and  peers  for  remov¬ 
ing  an  obstacle  to  progress.  Or  you  might  become 
known  as  threatening  and  self-serving. 

Each  of  those  options  has  its  risks.  Before  choos¬ 
ing  a  course  of  action,  ask  yourself  two  questions: 

Are  you  sure?  Remember  that  incompetence  is 


What  do  you  owe  the  organization?  Given  the 
risks,  why  do  anything?  Is  it  really  your  business? 

If  the  person  is  affecting  your  ability  to  get  your  job 


If  you  decide  to  act,  there  is  probably  only  one 
important  rule  to  follow:  Stick  to  the  facts.  When 
you  discuss  issues,  focus  on  the  specifics  of  the 
knowledge  shortfall  or  behavioral  problem,  not  on 
your  evaluation  of  the  person  or,  worse,  your  emo¬ 
tions  about  the  situation. 

This  may  sound  simple,  but  it’s  not  always 
easy  to  separate  facts  from  interpretations  and 
emotions.  The  best  approach  is  to  find  a  trusted 
adviser  or  peer  and  talk  things  through.  Notice 
the  language  you  use.  If  you  are  using  words  like 
always,  never,  must  or  won’t  (absolutes),  you  may  be 
slipping  into  evaluation  or  hyperbole.  Notice  the 
emotional  content  of  your  statements.  Are  they 
calm  and  clear,  or  are  they  angry,  sad,  outraged  or 
confused?  Until  you  understand  your  own  state  of 
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If  you  have  a  question 
for  one  of  our  Premier 
100  IT  Leaders,  send 

it  to  askaleader(f) 
computerworld.com. 

and  watch  for  this 
column  each  month. 
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It  May  Be  Longer  Now 


>  the  floor.  The  guy  looked ; 


OK,  That’s  a  Weakness 


t  know  what  introspective 


says  fish.  'But  one  candidate  could 
come  up  with  only  one  weakness.  I 
asked  him  if  he  reads;  he  said.  'No.  I 
watch  a  lot  of  TV.’  1  told  him  1  read  a 

Things  Change 

to  actually  complete  the  route,  and 
the  managers  don't  like  to  see  that 
we're  not  as  fast  as  before.'  * 

lot  of  biographies  of  people  such  as 
Newton.  Kepler.  Oppenheimer  and 

party  is  looking  into  a  product.  Tm 
concerned  that  the  software  passes 
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OPINION 

FRANK  HAYES 

‘Perfect  Citizen':  Wrong, 

But  the  Best  the  NSA  Can  Do 


The  big  issue 
is  Ntythe 
NSA  would 
have  to 
pay  special 
attention  to 
the  networks 
that  run 
critical  infra¬ 
structure. 
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THE  NSA’S  Perfect  Citizen  program  reminds  me  of  several  huge 
chunks  of  wood  that  used  to  be  suspended  30  feet  above  my  street 
by  heavy  cables  strung  between  utility  poles.  When  I  moved  in,  I 
needed  a  lot  of  extra  phone  lines,  and  it  seemed  like  it  was  taking 


forever  to  get  the  new  service  to  go  live.  When  I 
finally  asked  an  installer  why,  he  pointed  to  the 
chunks  of  wood. 

Know  what  those  are?  he  asked.  No  idea,  I  said. 

They  used  to  be  telephone  poles,  he  told  me. 
These  phone  lines  are  so  old  that  the  poles  rotted 
out  underneath  them.  But  instead  of  restringing 
the  lines,  the  phone  company  just  put  up  new 
poles,  attached  cables  to  the  old  poles  where  the 
phone  lines  connected  to  them  and  sliced  the 
poles  off  just  above  and  below  that  point. 

Congratulations,  he  said.  By  ordering  five  new 
lines,  you  forced  them  to  replace  that  old  copper. 

What  does  that  have  to  do  with  Perfect  Citizen? 
Unfortunately,  a  lot. 

The  program’s  official  purpose  is  to  develop  the 
ability  to  monitor  the  U.S.  critical-infrastructure 
grid,  so  cyberattacks  against  it  can  be  spotted 
early  and  defended  against  effectively.  Think  of  it 
as  packet  inspection  and  network  traffic  analysis, 
except  on  a  huge  scale  and  really  fast. 

Some  people  worry  that  the  NSA  might  listen 
in  on  Internet  conversations.  Look,  it  can  already 
do  that  The  big  issue  is  why  the  NSA  would  have 
to  pay  special  attention  to  the  networks  that  run 
critical  infrastructure. 

The  reason  lor  that  is  painfully  simple:  Those 
networks  are  old.  They  were  designed  as  private 
networks,  with  no  need  for  much  security  because 
hacking  into  them  would  require  making  a  physi¬ 
cal  connection.  But  when  they  were  hooked  up  to 
the  Internet,  they  weren't  rebuilt  from  the  ground 
up,  or  even  heavily  reworked  to  make  them  more 
secure.  That  would  have  been  expensive  —  and 


utilities  ate  notorious  for  avoiding  any  costs  that 
can’t  be  recouped  by  raising  rates. 

And  as  IT  people  know  all  too  well,  no  money 

Instead,  the  utilities  did  the  equivalent  of 
stringing  cables,  whacking  the  old  poles  off  above 
and  below,  and  then  going  about  their  business, 
hoping  no  one  would  worry  about  big  chunks  of 
aging  network  hanging  out  in  full  view. 

The  NSA  shouldn’t  be  babysitting  these  ratting 
chunks  of  network,  or  even  just  figuring  out  better 
ways  to  monitor  them.  Instead,  the  NSA  should  be 
developing  the  most  bulletproof  designs  possible 
for  these  critical-infrastructure  networks,  based 
on  the  best  crypto  and  security  that  the  NSA  is 
willing  to  release  to  the  private  sector. 

And  then  those  networks  shouldn't  be  retrofit¬ 
ted  with  the  new  design  —  they  should  be  ripped 
out  and  replaced  properly. 

That's  what  should  happen. 

But  that  may  not  be  politically  possible.  Even 
with  shiny  new  high-security  designs,  replacing 
those  networks  is  still  expensive. 

Who’s  going  to  pay?  Getting  approvals  for  rate 
increases  from  dozens  of  state  utility  commis¬ 
sions  is  politically  impossible,  as  is  the  prospect 
of  the  federal  government  just  tossing  money  to 
the  utilities  to  do  the  upgrades,  or  taking  over  the 
networks  in  the  name  of  security. 

And  in  the  end,  that's  why  the  NSA  is  doing 
this.  It’s  a  bad  idea,  and  a  long  way  from  perfect. 

It’s  not  the  job  the  NSA  should  be  doing. 

But  in  a  very  imperfect  situation.  Perfect 
Citizen  may  be  the  best  we  can  do.  • 
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